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All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
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NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
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3. ^ The drawings filed on 27 February 2002 ate accepted by the Examiner. 
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International Bureau (PCT Rule 17.2(a)). 
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Response to Amendment 



1. 



Applicant's request for reconsideration filed on 12/13/2004 has been received. 



2. 



The amendment filed on 12/13/2004 has been entered (including amendments to the 



specification, amendments to the claims 19, 32 and new claims 40-51). 



EXAMINER'S AMENDMENT 



3. An examiner's amendment to the record appears below. Should the changes and/or additions be 
unacceptable to applicant, an amendment may be filed as provided by 37 CFR 1.312. To ensure 
consideration of such an amendment, it MUST be submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with the 
applicant's attorney Gerald Chan on 4/14/2005. 

The application has been amended as follows: 
The claims 10 and 43 are cancelled, and the claims 1, 11, 19, 21, 39, and 44 are amended, as mentioned 
below: 

1 . (Currently Amended) A method for managing user access information for access to one or more 
database network nodes, the method comprising: 

storing database user authorization in a central directory that is connected to one or more 
databases, the database user authorization comprising a user role, the user role comprising one or more 
privileges; 

storing database user authentication information; 

locally defining the user role at a network node; 

receiving an access request from a user for the network node; 

authenticating the user based upon the database user authentication information; and 

granting the user privileges on the network node based upon the user role; 

wherein the database user authorization is stored as one or more data objects in the central 
directory. 
10. (Canceled) 
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1 1 . (Currently Amended) The method of claim 1 in which the one or more objects are stored in a security 
subtree in the central directory. 

19. (Currently Amended) A system for managing user access information for one or more database 
network nodes, comprising: 
a LDAP directory; 

one or more database network nodes for which user access is sought; and 

user access information data objects stored in the LDAP directory, the user access information 

data objects comprising authentication and authorization information, wherein the authorization 

information is associated with a scope of access for a user; 

wherein the user access information data objects are associated with an enterprise role, the 

enterprise role comprising a collection of roles associated with one or more databases. 

21 . (Currently Amended) The system of claim 20 in which the domain object is associated with the 

enterprise role. 

39. (Currently Amended) A computer program product that includes a medium usable by a processor, the 
medium having stored thereon a sequence of instructions which, when executed by said processor, 
causes said processor to execute a process for managing user access information for database network 
nodes, the process comprising: 

storing database user authorization in a central directory that is connected to one or more 
databases, the database user authorization comprising a user role, the user role comprising one or more 
privileges; 

storing database user authentication information; 
locally defining the user role at a network node; 
receiving an access request from a user for the network node; 
authenticating the user based upon the database user authentication information; and 
granting the user privileges on the network node based upon the user role; 
wherein the database user authorization is stored as one or more data objects in the central 
directory. 



Application/Control Number: 10/084,880 Page 4 

Art Unit: 2133 

43. (Canceled) 

44. (Currently Amended) The computer program product of claim 39 in which the one or more objects are 
stored in a security subtree in the central directory. 

4. Amendments to claims 1,19, and 39 are for the purpose of clarifying what Applicant regards as 
the invention. Amendments to claims 1 1 and 44 are to change claim dependencies. Amendment to claim 
21 is to bring this claim into conformity with the language of its base claim. No new matter has been 
added. 

The Commissioner is authorized to charge any fees due in connection with the filing of this 
document to Bingham McCutchen's Deposit Account No. 50-2518, referencing billing number 
7010852003. The Commissioner is authorized to credit any overpayment or to charge any underpayment 
to Bingham McCutchen's Deposit Account No. 50-2518, referencing billing number 7010852003. 

Allowable Subject Matter 

5. Claims 1-9, 1 1-42, 44-51 are allowed. 
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Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to Dipakkumar Gandhi whose telephone number is 571-272-3822. The examiner can 
normally be reached on 8:30 AM - 5:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Albert Decady can be reached on (571) 272-3819. The fax phone number for the organization where this 
application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-217-9197 (toll-free). 





Dipakkumar Gandhi 



Patent Examiner 



